CVE-2025-23393

Name of the Vulnerable Software and Affected Versions spacewalk-java versions 5.0.4.7.19.1 through 5.0.24-150600.3.25.1 SUSE Manager Server Module 4.3 versions prior to 4.3.85-150400.3.105.3

Description A vulnerability in spacewalk-java allows execution of arbitrary Javascript code on users' machines due to improper neutralization of script-related HTML tags in a web page. This issue enables basic XSS attacks.

Recommendations For versions 5.0.4.7.19.1 through 5.0.24-150600.3.25.1, update to version 5.0.24-150600.3.25.1 or later. For SUSE Manager Server Module 4.3 versions prior to 4.3.85-150400.3.105.3, update to version 4.3.85-150400.3.105.3 or later.